Access-list Question

[twu1966]

Hi,

if I have an access-list here

access-list 101 deny tcp 63.36.9.0 0.0.0.255 any eq 80

do I need to apply to interface s0 port?

Can you tell me what command syntax to do?

thanks again

[jacquesd]

Hi,

You can appy it with

(config-if)# ip access-group 101 [in | out]

depending on where the traffic is coming

from or going to.

Jacques

[d.kutchin]

... also ...

- remember the implicit deny any statement -

add the following line to your ACL to permit remaining traffic (NB: there should always be at least a permit statement in an ACL):

access-list 101 permit ip any any

[chercom]

Is this for filtering inbound or outbound traffic?

!in bound traffic

int s0

ip access-group 101 in

!out bound traffic

int s0

ip access-group 101 out

[twu1966]

thank you very much for all of you to help me here.

I got it. thanks again.

This is a great forum and many good expertise people here.